Xbase++

Salesforce OAuth2 Refresh Access Token

See more OAuth2 Examples

Demonstrates how to refresh a Salesforce Access Token.

Note: Use Chilkat v10.1.2 or later for this example.

Xbase++

LOCAL nSuccess
LOCAL oJsonToken
LOCAL oOauth2
LOCAL oSbJson

nSuccess := 0

//  This example requires the Chilkat API to have been previously unlocked.
//  See Global Unlock Sample for sample code.

//  It is assumed we previously obtained an OAuth2 access token.
//  This example loads the JSON access token file 
//  saved by this example: Get SalesForce OAuth2 Access Token via Authorization Flow

oJsonToken := CreateObject("Chilkat.JsonObject")
nSuccess := oJsonToken:LoadFile("qa_data/tokens/_salesforce.json")
IF (nSuccess != 1)
    ? "Failed to load _salesforce.json"
    oJsonToken:destroy()
    RETURN
ENDIF

//  This is an example of a Salesforce OAuth2 access token to be refreshed:

//  {
//    "access_token": "00D41000....uLZBpT6",
//    "refresh_token": "5Aep....25xdGgkrV",
//    "signature": "cjTbSc5DvcKpaMoRTzuQTJLb1tcMw8LEO01flq4aMD4=",
//    "scope": "refresh_token id",
//    "instance_url": "https://d41000000f8a0eak-dev-ed.my.salesforce.com",
//    "id": "https://login.salesforce.com/id/00D41000000F8A0EAK/005410000....xAAE",
//    "token_type": "Bearer",
//    "issued_at": "1738348388166"
//  }

oOauth2 := CreateObject("Chilkat.OAuth2")

oOauth2:TokenEndpoint := "https://login.salesforce.com/services/oauth2/token"

//  Replace this with your actual client ID (Consumer Key)
oOauth2:ClientId := "CLIENT_ID"

//  Note: The client secret is not required because we configured our Connected App
//  to not require it for the refresh flow.  See the screenshot below.

//  Get the "refresh_token"
oOauth2:RefreshToken := oJsonToken:StringOf("refresh_token")

//  Send the HTTP POST to refresh the access token..
nSuccess := oOauth2:RefreshAccessToken()
IF (nSuccess != 1)
    ? oOauth2:LastErrorText
    oJsonToken:destroy()
    oOauth2:destroy()
    RETURN
ENDIF

//  The response contains a new access token, but we must keep
//  our existing refresh token for when we need to refresh again in the future.
oJsonToken:UpdateString("access_token", oOauth2:AccessToken)

//  Save the new JSON access token response to a file.
oSbJson := CreateObject("Chilkat.StringBuilder")
oJsonToken:EmitCompact := 0
oJsonToken:EmitSb(oSbJson)
oSbJson:WriteFile("qa_data/tokens/_salesforce.json", "utf-8", 0)

? "OAuth2 authorization granted!"
? "New Access Token = " + oOauth2:AccessToken

//  --------------------------------------------------------------------------
//  Here's a screenshot of a Salesforce Connected App 
//  which does not requires the secret for the authorization or refresh flow.
//  

oJsonToken:destroy()
oOauth2:destroy()
oSbJson:destroy()